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Abstract 

The paper uses the formalism of indexed categories to recover the proof 
of a standard final coalgebra theorem, thus showing existence of final 
coalgebras for a special class of functors on categories with finite limits 
and colimits. As an instance of this result, we build the final coalgebra 
for the powerclass functor, in the context of a Heyting pretopos with a 
class of small maps. This is then proved to provide a model for various 
non-well-founded set theories, depending on the chosen axiomatisation for 
the class of small maps. 



1 Introduction 

The explicit use of bisimulation for set theory goes hack to the work 
on non-wellfounded sets by Aczel(1988). It would he of interest to 
construct sheaf models for the theory of non-wellfounded sets from 
our axioms for small maps. 

- Joyal and Moerdijk, 1995 

Since its first appearance in the book by Joyal and Moerdijk [TO], algebraic 
set theory has always claimed the virtue of being able to describe, in a single 
framework, various different set theories. In fact, the correspondence between 
axiom systems for a class of small maps and formal set theories has been put 
to work first in the aforementioned book, and then in the work by Awodey 
et al. 12], thus modeUing such theories as CZF, IZF, BIST, CST and so on. 
However, despite the suggestion in 10^ . it appears that up until now no one ever 
tried to put small maps to use in order to model a set theory which includes 
the Anti-Foundation Axiom AFA. 

This papers provides a first step in this direction. In particular, we build 
a categorical model of the weak constructive theory CZFq of (possibly) non- 
well-founded sets, studied by Aczel and Rathjen in 3 . Classically, the universe 
of non-well-founded sets is known to be the final coalgebra of the powerclass 
functor 1 . Therefore, it should come as no surprise that we can build such a 
model from the final coalgebra for the functor Vs determined by a class of small 
maps. 
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Perhaps more surprising is the fact that such a coalgebra always exists. We 
prove this by means of a final coalgebra theorem, for a certain class of functors 
on a finitely complete and cocomplete category. The intuition that guided us 
along the argument is a standard proof of a final coalgebra theorem by Aczel 
^ for set-based functors on the category of classes that preserve inclusions and 
weak puUbacks. Given one such functor, he first considers the coproduct of all 
small coalgebras, and shows that this is a weakly terminal coalgebra. Then, 
he quotients by the largest bisimulation on it, to obtain a final coalgebra. The 
argument works more generally for any functor of which we know that there is 
a generating family of coalgebras, for in that case we can take the coproduct of 
that family, and perform the construction as above. The condition of a functor 
being set-based assures that we are in such a situation. 

Our argument is a recasting of the given one in the internal language of 
a category. Unfortunately, the technicalities that arise when externalising an 
argument which is given in the internal language can be off-putting, at times. 
For instance, the externalisation of internal colimits forces us to work in the 
context of indexed categories and indexed functors. Within this context, we say 
that an indexed functor (which turns puUbacks into weak puUbacks) is small- 
based when there is a "generating family" of coalgebras. For such functors we 
prove an indexed final coalgebra theorem. We then apply our machinery to the 
case of a Heyting pretopos with a class of small maps, to show that the functor 
Vs is small-based and therefore has a final coalgebra. As a byproduct, we are 
able to build the M-type for any small map / (i.e. the final coalgebra for the 
polynomial functor Pf associated to /). 

For sake of clarity, we have tried to collect as much indexed category theory 
as we could in a separate section. This forms the content of Section [21 and we 
advise the uninterested reader to skip all the details of the proofs therein. This 
should not affect readability of Section |2| where we prove our final coalgebra 
results. Finally, in Section 0] we prove that the final P^-coalgebra is a model of 
the theory CZFo+AFA. 

Our choice to focus on a weak set theory such as CZFq is deliberate, since 
stronger theories can be modelled simply by adding extra requirements for the 
class of small maps. For example, we can model the theory CST of Myhill J2| 
(plus AFA), by adding the Exponentiation Axiom, or IZF^+AFA by adding 
the Powerset, Separation and Collection axioms from '10' p. 65]. And we can 
force the theory to be classical by working in a boolean pretopos. This gives a 
model of ZF~-|-AFA, the theory presented in Aczel's book 1_, apart from the 
Axiom of Choice. Finally, by adding appropriate axioms for the class of small 
maps, we build a model of the theory CZF~-|-AFA, which was extensively 
studied by M. Rathjen in [HIITK] . 

As a final remark, we would like to point out that the present results fit 
in the general picture described by the two present authors in 17 . (Inciden- 
tally, we expect that, together with the results on sheaves therein, they should 
yield an answer to the question by Joyal and Moerdijk which we quoted in 
opening this introduction.) There, we suggested that the established connec- 
tion between Martin-Lof type theory, constructive set theory and the theory of 
nVF-pretoposes had an analogous version in the case of non- well-founded struc- 
tures. While trying to make the correspondence between the categorical and 
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the set theoretical sides of the picture precise, it turned out that the M-types in 
nAf-pretoposes are not necessary, in order to obtain a model of some non-well- 
founded set theory. This phenomenon resembles the situation in where 
Lindstrom built a model of CZF^+AFA out of a Martin-L6f type theory with 
one universe, without making any use of M-types. 

2 Generating objects in indexed categories 

As we mentioned before, our aim is to prove a final coalgebra theorem for a 
special class of functors on finitely complete and cocomplete categories. The 
proof of such results will be carried out by repeating in the internal language of 
such a category C a classical set-theoretic argument. This forces us to consider C 
as an indexed category, via its canonical indexing C, whose fibre over an object 
X is the slice category C/X. We shall then focus on endofunctors on C which 
are components over 1 of indexed endofunctors on C. For such functors, we shall 
prove the existence of an indexed final coalgebra, under suitable assumptions. 
The component over 1 of this indexed final coalgebra will be the final coalgebra 
of the original C-endofunctor. 

Although in Section 13.31 we will apply our results only in a very specific 
setting, it turns out that all the basic machinery needed for the proofs can be 
stated in a more general context. This section collects as much of the indexed 
category theoretic material as possible, hoping to leave the other sections easier 
to follow for a less experienced reader. 

So, for this section, S will be a cartesian category, which we use as a base 
for indexing. Our notations for indexed categories and functors follow those 
of [3 Chapters Bl and B2], to which we refer the reader for all the relevant 
definitions. 

We will mostly be concerned with S-cocomplete categories, i.e. iS-indexed 
categories in which each fibre is finitely cocomplete, finite colimits are preserved 
by reindexing functors, and these functors have left adjoints satisfying the Beck- 
Chevalley condition. Under these assumptions it immediately follows that: 

Lemma 2.1 // the fibre C — of an S-cocomplete S-indexed category C has a 
terminal object T , then this is an indexed terminal object, i.e. X*T is terminal 
in for all X in S . 

The first step, in the set-theoretic argument to build the final coalgebra, 
is to identify a "generating family" of coalgebras, in the sense that any other 
coalgebra is the colimit of all coalgebras in that family which map to it. If we 
want to express this in the internal language, we need to introduce the concept 
of internal colimits in indexed categories. To this end, we first recall that an 
internal category K in 5 consists of a diagram 

di 
do 

where c?i is the domain map, do is the codomain one and they have a common 
left inverse i, satisfying the usual conditions. There is also a notion of internal 
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functor between internal categories, and this gives rise to the category of internal 
categories in S (see [9| Section B2.3] for the details). 

An internal diagram L of shape K in an iS-indexed category C consists of 

an internal 5-category K, an object L in C^", and a map dlL >dQL in C^^ 

which interacts properly with the categorical structure of K. Moreover, one can 
consider the notion of morphism of internal diagrams, and these data define the 
category C"^ of internal diagrams of shape K m C. 

An indexed functor F:C >-D induces an ordinary functor F^^-.C^"- yD"^ 

between the corresponding categories of internal diagrams of shape K. Du- 
ally, given an internal functor F: K. >-JJ, this (contravariantly) determines by 

reindexing of C an ordinary functor on the corresponding categories of internal 

diagrams: F*:^^ >C^. We say that C has internal left Kan extensions if 

these reindexing functors have left adjoints, denoted by Lanp. In the partic- 
ular case where J = 1, the trivial internal category with one object, we write 

IK*:C S'C*' for the functor, and colimK for its left adjoint LariK, and we call 

colimK^ the internal colimit of L. 



Definition 2.2 Suppose C and D are 5- indexed categories with internal col- 

imits of shape K. Then, we say that an 5-indexed functor F: C >-D preserves 

colimits if the canonical natural transformation filling the square 



colimK 




)limK 



is an isomorphism. 



It follows at once from Proposition B2.3.20 in that: 



Proposition 2.3 //C is an S-cocomplete S-indexed category, then it has col- 
imits of internal diagrams and left Kan extensions along internal functors in 

S. Moreover, if an indexed functor F:C >-D between S-cocomplete categories 

preserves S-indexed colimits, then it also preserves internal colimits. 

When forming the internal diagram of those coalgebras that map into a given 
one, say {A, a), we need to select out of an object of maps to A those which are 
coalgebra morphisms. In order to consider such objects of arrows in the internal 
language, we need to introduce the following concept: 

Definition 2.4 An object E in the fibre of an iS-indexed category C is 
called exponentiable if for any object A in any fibre there is an exponential 
A^ fitting in a span 

U^^A^^I (1) 

in S and a generic arrow e:s*E >t*A in , with the following universal 

property: for any other span in S 
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and any arrow tp:x*E >y*A in C'\ there is a unique arrow x- J >-^^ in S 

such that sS^ — X, tx — y and x*^ — 4' (via the canonical isomorphisms arising 
from the two previous equahties). 

Remark 2.5 It foUows from the definition, via a standard diagram chasing, 

that the reindexing along an arrow /: V >U in S of an exponentiable object 

E in is again exponentiable. 

Remark 2.6 We advise the reader to check that, in case C is a cartesian cat- 
egory and C is its canonical indexing over itself, the notion of exponentiable 
object agrees with the standard one of exponentiable map, in the sense of |10l 
p. 7]. 

Given an exponentiable object E in and an object A in C^, the canonical 
cocone from E to A \s in the internal language the cocone of those morphisms 
from E to A. Formally, it is described as the internal diagram (K"^, L^), where 
the internal category and the diagram object are defined as follows. 
is the object A^ , with arrows s and t as in QJ, and is the puUback 



E^^^U, 
t 

where 

U E^ — ^ U 

is the exponential of E with itself. In the fibres over A^ and E^ we have generic 
maps e: s*E }-t*A and e:s*E >t*E, respectively. 

The codomain map do of is the top row of the pullback above, whereas 
di is induced by the composite 

{sx)*E ^ {tx)*E = {sdo)*E ^ itda)*A 

via the universal property of A^ and e. 

The internal diagram L"^ is now the object s*E in C^" , and the arrow from 
d^L^ to d^L^ is (modulo the coherence isomorphisms) x*e. 

When the colimit of the canonical cocone from i? to A is A itself, we can 
think of A as being generated by the maps from E to it. Therefore, it is natural 
to introduce the following terminology. 

Definition 2.7 The object E is called a generating object if, for any A in 
C = C\ A = colimKAi^. 

Later, we shall see how F-coalgebras form an indexed category. Then, a gen- 
erating object for this category will provide, in the internal language, a "gener- 
ating family" of coalgebras. The set-theoretic argument then goes on by taking 
the coproduct of all coalgebras in that family. This provides a weakly terminal 
coalgebra. Categorically, the argument translates to the following result. 
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Proposition 2.8 Let C be an S-cocomplete S-indexed category with a generat- 
ing object E in . Then, C — has a weakly terminal object. 



Proof. We build a weakly terminal object in C by taking the internal colimit 
Q of the diagram (K, L) in C, where Ko — U, Ki — (with domain and 
codomain maps s and t, respectively), L — E and the map from d^L to d\L is 
precisely e. 

Given an object A = colimuAL'^ in C, notice that the serially commuting dia- 
gram 



E^ 



defines an internal functor J: 
ternal 5-categories 



We have a commuting triangle of in- 




Taking left adjoint along the reindexing functors which this induces on cate- 
gories of internal diagrams, we get that colim^A = colimK o Lanj. Hence, to 
give a map from A = colimj^^L"^ to Q = colimK^ it is sufficient to give a mor- 
phism of internal diagrams from (IK, Lan jL^) to (K, L), or, equivalently, from 
{K^, L^) to (K'^, J*L), but the reader can easily check that these two diagrams 
are in fact the same. □ 



Once the coproduct of coalgebras in the "generating family" is formed, the 
set-theoretic argument is concluded by quotienting it by its largest bisimulation. 
One way to build such a bisimulation constructively is to identify a generating 
family of bisimulations and then taking their coproduct. 

This suggests that we apply Proposition 12.81 twice: first in the indexed cat- 
egory of coalgebras, in order to obtain a weakly terminal coalgebra (G, 7), and 
then in the (indexed) category of bisimulations over (G,7). To this end, we 
need to prove cocompleteness and existence of a generating object for these 
categories. The language of inserters allows us to do that in a uniform way. 

Instead of giving the general definition of an inserter in a 2-category, we 
describe it here explicitly for the 2-category of iS-indexed categories. 

Definition 2.9 Given two iS-indexed categories C and D and two parallel 5- 

indexed functors F,G:C >D, the inserter I = Ins(F, G) of F and G has as 

fibre J-^ the category whose objects are pairs {A, a) consisting of an object A 

in and an arrow in T)^ from F-^ A to A, an arrow {A, a) y{B,(3) 

being a map 0: A >B in such that G^(0)q! = l3F^{(j)). 
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The reindexing functor for a map /: Y >X in S takes an object {A, a) in 

to the object {f*A,f*a), where f*a has to be read modulo the coherence 
isomorphisms of D, but we shaU ignore these thoroughly. 

There is an indexed forgetful functor J7:Ins(F, G) >C which takes a pair 

{A, a) to its carrier A; the maps a determine an indexed natural transformation 

FU >GU. The triple (Ins(F, G), U, FU >GU) has a universal property, like 

any good categorical construction, but we will not use it in this paper. The 
situation is depicted as below: 

Ins(F, G) — ^ C D. (2) 

G 

A tedious but otherwise straightforward computation, yields the proof of the 
following: 

Lemma 2.10 Given an inserter as in 0), if C and D are S-cocomplete and 
F preserves indexed colimits, then Ins(i^, G) is S-cocomplete and U preserves 
colimits (in other words, U creates colimits). In particular, Ins(F, G) has all 
internal colimits, and U preserves them. 

Example 2.11 We shall be interested in two particular inserters, during our 
work. One is the indexed category F — Coalg of coalgebras for an indexed 
endofunctor F on C, which can be presented as the inserter 

TT Id 

Insfld. F~) C. 1 r. (3) 

F 

More concretely, (F — Coalg)^ = -F'^ — coalg consists of pairs {A, a) where A is 

an object and a: A >F^ A a map in C^, and morphisms from such an {A, a) 

to a pair {B,(3) are morphisms (j): A >B in such that F^ {(j>)a = (3(f>. The 

reindexing functors are the obvious ones. 

The other inserter we shall need is the indexed category §pan(A/, N) of spans 
over two objects M and N in of an indexed category. This is the inserter 

IT 

InsfA. (M. N)] — ^ r. \ C X C (4) 

{M,N) 

Where C x C is the product of C with itself (which is defined fibrewise) , A is 
the diagonal functor (also defined fibrewise), and {AI,N) is the pairing of the 
two constant indexed functors determined by M and N. By this we mean that 
an object in C is mapped to the pair (M, TV) and an object in C'^ is mapped to 
the pair {X*M,X*N). 

Remark 2.12 Notice that, in both cases, the forgetful functors preserve S- 
indexed colimits in C, hence both F— Coalg and §pan(Af, TV) are iS-cocomplete, 
and also internally cocomplete, if C is. 
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In order to apply Proposition 12.81 to our indexed categories, we will need 
to find a generating object for them. This will be achieved by means of the 
following two lemmas. 

First of all, consider an 5- indexed inserter I = Ins(F, G) as in such that 
F preserves exponentiable objects. Then, given an exponentiable object E in 
, we can define an arrow U ^ U in S and an object {E,e) in , as follows. 

We form the generic map e: s*F^ E >t*G^ E associated to the exponential 

of E and E (which exists because F preserves exponentiable objects), and 
then define U as the equaliser of the following diagram 

U [G^E)^"^ =t (5) 

t 

the arrow r: U vU being one of the two equal composites se = te. 

We then put E — r*E and 

£ = F^{r*E)^^e*s*F^E^^e*t*G^E^^G^{r*E). 

The pair {E,e) defines an object in 2^ . 

Lemma 2.13 The object {E,e) is exponentiable in Ins(i^, G). 

Proof. Consider an object {A, a) in a fibre Z-^. Then, we define the exponential 
(A,a)(^'^) as follows. 

First, we build the exponential 

of A and E in C, with generic map x- s*E >t*A. Because F preserves expo- 
nentiable objects, we can also form the exponential in B 

U G^A''"^ X 

with generic map x'-'s*F^ E >t G^A. By the universal property of x, the two 

composites m T> 

s*F^E ~ > F^''s*E >F'^''{t*A) ~ H *F^A ^t*G^A 

and 

s*F^E s*G^E G^^s*E G^^t*A t*G^A 

give rise to two maps pi,p2'.A^ >G^ A^ ^ in iS, whose equaliser i has as 

domain the exponential {A,a)^^''^\ 
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The generic map {si)*{E,e) >{ti)*{A,a) in associated to this ex- 

ponential forms the central square of the following diagram, and this commutes 
because its outer sides are the reindexing along the maps pii = of the generic 
map X above: 



{si)*F^E 



(si)* e 



{si)*G^E 



isi)'iE.:e) 



{ti)*F^A 



The verification of its universal property is a lengthy but straightforward exer- 
cise. □ 



Next, we find a criterion for the exponentiable object {E, e) to be generating. 

Lemma 2.14 Consider an inserter of S -indexed categories as in 0), where C 
and B are S-cocomplete, and F preserves S-indexed colimits. If {E,e) is an 
exponentiable object in and for any (A, a) in the equation 

colimK(A.c)f7L(^^"' 9^ U{A,a) = A 

holds, where (IK'^"^'"\ L'-'^^"') is the canonical cocone from {E,e) to {A, a), then 
{E,e) is generating in Ins(_F, G). 

Proof. Recall from Lemma 12.101 that Ins(i^, G) is internally cocomplete and 

the forgetful functor U:Ins{F,G) >C preserves internal colimits. Therefore, 

given an arbitrary object {A, a) in I^, we can always form the colimit (B, (3) — 
colimjj(A,a)L'-'^'"-'. All we need to show is that [B, (3) = (A, a). The isomorphism 
between B and A exists because, by the assumption, 

B = U{B,I3) = [/colimK(A,.)L(^^") = colimK(A,.) C/L^^'") A. 

Now, it is not too hard to show that the transpose of the composite 

colimK(A,c)i^%^L(^^") ^ Ft/colimKCA.^jLt-^'") ^ Gf/colimK(A,.) L^^'") 

is (modulo isomorphisms preserved through the adjunction colimjj(A,Q) H K*^"^^") ) 
the transpose of a. Hence, j3 = a and we are done. □ 



As an example, we can show the following result about the indexed category 
of spans: 
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Proposition 2.15 Given an S-cocomplete indexed category C and two objects 
M and N in C^, if C has a generating object, then so does the indexed category 
of spans P = Span(M, N) . 

Proof. Recall from Example l2.11l that the functor U : §pan(A/, N) >-C creates 

indexed and internal colimits. If E in is a generating object for C, then, by 
Lemma 12.131 we can build an exponentiable object 

(E,e) ^ M ^^^E-^ N 

in . We are now going to prove that §pan(A/, N) meets the requirements of 
Lemma [2 .141 to show that i? is a generating object. 

To this end, consider a span 

in V^. Then, we can form the canonical cocone (K*^^'"\ L^"^'")) from {E,e) to 
{A, a) in §pan(M, A''), and the canonical cocone {K^,L^) from to A in C. 

The map r: U >U of (0 induces an internal functor u: K^"^'") s-K'^, which is 

an isomorphism. Therefore, the induced reindexing functor u*: C*^ >C^^ ' ' 

between the categories of internal diagrams in C is also an isomorphism, and 
hence colimjjcA.ajW* = cohm^A. Moreover, it is easily checked that u*L^ — 
Ul{A,a)^ Therefore, we have 

colimjj(A.o) C/i*-"^'"' = colim]K(A,c)U*L'^ = colimKAL"^ = A 

and this finishes the proof. □ 



3 Final coalgebra theorems 

In this section, we are going to use the machinery of Section[21in order to prove 
an indexed final coalgebra theorem. We then introduce the notion of a class of 
small maps for a Heyting pretopos with an (indexed) natural number object, 
and apply the theorem in order to derive existence of final coalgebras for various 
functors in this context. In more detail, we shall show that every small map has 
an M-type, and that the functor Vs has a final coalgebra. 

3.1 An indexed final coalgebra theorem 

In this section, C is a category with finite limits and stable finite colimits (that 
is, its canonical indexing C is a C-cocomplete C-indexed category), and F is an 
indexed endofunctor over it (we shall write F for F^). Recall from Remark 12.121 
that the indexed category F— Coalg is C-cocomplete (and the indexed forgetful 
functor U preserves indexed colimits). 
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We say that F is small-based whenever there is an exponentiable object 
{E,e) in i^*^ — coalg such that, for any other F-coalgebra {A, a), the canonical 
cocone (IK(^'"),L(^^")) from {E,e) to {A, a) has the property that 

colimK(A.c) UL'-^'"^ = U{A, a) = A. (6) 

It is immediate from Example 12 . 1 II and Lemma l2.14l that. whenever there is 
a pair {E, e) making F small-based, this is automatically a generating object in 
F — Coalg. We shall make an implicit use of this generating object in the proof 
of: 

Theorem 3.1 Let F be a small-based indexed endofunctor on a category C as 
above. If F^ takes pullbacks to weak pullbacks, then F has an indexed final 
coalgebra. 

Before giving a proof, we need to introduce a little technical lemma: 

Lemma 3.2 If F — F^ turns pullbacks into weak pullbacks, then every pair of 
arrows 

can be completed to a commutative square by the arrows 

in such a way that the underlying square in C is a pullback. Moreover, if is a 
coequaliser in C, then so is fi. 

Proof. We build P as the pullback of ip and </> in C = C^. Then, since F 

turns pullbacks into weak pullbacks, there is a map x'- P >FP , making both 

jji and V into coalgebra morphisms. The second statement follows at once by 
the assumption that finite colimits in C are stable. □ 

Proof of Theorem 13. IL Because F — Coalg is C-cocomplete, it is enough, by 
Lemma 12.11 to show that the fibre over 1 of this indexed category admits a 
terminal object. 

Given that {E,e) is a generating object in F — Coalg, Proposition 12.81 implies 
the existence of a weakly terminal F-coalgebra (C?, 7). The classical argu- 
ment now goes on taking the quotient of (G, 7) by the maximal bisimulation 
on it, in order to obtain a terminal coalgebra. We do that as follows. Let 
B = §pan((G', 7), (G, 7)) be the indexed category of spans over (G, 7), i.e. bisim- 
ulations. Then, by Remark |2. 121 B is a C-cocomplete C-indexed category, and 
by Proposition 12 . 1 51 it has a generating object. Applying again Proposition l2.8l 
we get a weakly terminal span (i.e. a weakly terminal bisimulation) 

(G,7)^(i?,/3)^(G,7). 
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We now want to prove that the coequaliser 



(B,/3)^(G,7)^(T,t) 

p 

is a terminal _F-coalgebra. 

It is obvious that (T, t) is weakly terminal, since (G, 7) is. On the other hand, 

suppose {A^a) is an i^-coalgebra and f,g:{A^a) >{T,t) are two coalgebra 

morphisms; then, by Lemma 13.21 the puUback s (resp. t) in C of q along / (resp. 
g) is a coequaliser in C, which carries the structure of a coalgebra morphism into 
{A, a). One further application of Lemma 1^.21 to s and t yields a commutative 
square in F — coalg 

(F,7r)^^. 

t' t 
• i — yiA,a) 

whose underlying square in C is a puUback. Furthermore, the composite d — 
ts' = st' is a regular epi in C, hence an epimorphism in _F — coalg. 

Write 's (resp. t) for the composite of t' (resp. s') with the projection of the 
puUback of / (resp. g) and q to G. Then, the triple ((P, tt), s", t) is a span over 
(G,7); hence, there is a morphism of spans 

X:((P,^),s,t)^((S,/3),A,p). 

It is now easy to compute that fd — qXx = qpx — 5^?, hence f = g, and the 
proof is complete. □ 

As a particular instance of Theorem 13.11 we can recover the classical result 
from Aczel P p. 87]. 

Corollary 3.3 (Final Coalgebra Theorem) Any standard functor (on the 
category of classes) that preserves weak pullbacks has a final coalgebra. 

Proof. First of all, notice that preservation of weak pullbacks is equivalent to 
our requirement that pullbacks are mapped to weak pullbacks. Moreover, the 
category of classes has finite limits and stable finite colimits. As an exponen- 
tiable object, we take the class V of all small sets. 

Now, consider a standard functor F on classes (in Aczel's terminology). This 
can easily be seen as an indexed endofunctor, since for any two classes X and 
J, one has X/I = (so, the action of F can be defined componentwise). It is 
now sufficient to observe that every P-coalgebra is the union of its small sub- 
coalgebras, therefore the functor is small-based in our sense. □ 



Remark 3.4 With a bit of effort, the reader can see in the present proof of 
Theorem 13.11 an abstract categorical reformulation of the classical argument 
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given by Aczel in his book 1 . In order for that to work, he had to assume 
that the functor preserves weak puUbacks (and so did we, in our reformulation). 
Later, in a joint paper with Nax Mendler [2], they gave a different construction 
of final coalgebras, which allowed them to drop this assumption. A translation of 
that argument in our setting, would reveal that the construction relies heavily on 
the exactness properties of the ambient category of classses. Since the functors 
in our examples always preserve weak puUbacks, we preferred sticking to the 
original version of the result (thus making weaker assumptions on the category 
C), without boring the reader with a (presently unnecessary) second version, 
which, however, we believe can be proved. 

More recently, the work of Adamek, et al. ^ has shown that every endo- 
functor on the category of classes is small-based, thereby proving that it has a 
final coalgebra (by Aczel and Mendler's result) . Their proof makes a heavy use 
of set theoretic machinery, which would be interesting to analyse in our setting. 



3.2 Small maps 



We are now going to consider on C a class of small maps. This will allow us 
to show that certain polynomial functors, as well as the powerclass functor, are 
small-based, and therefore we will be able to apply Theorem 13.11 to obtain a 
final coalgebra for them. 

From now on, C will denote a Heyting pretopos with an (indexed) natu- 
ral number object. That is, an object N, together with maps 0: 1 )-N and 

s:N >-N such that, for any object P and any pair of arrows f:P >Y and 

tiPxY >Y, there is a unique arrow /: P x N >Y such that the following 

commutes: 



Pxl 



P- 



idxO 



(id,/) 



-> PxN- 
L 

(Puf) 
-^PxY- 



id X s 



>PxN 



->y. 



It then follows that each slice C/X has a natural number object XxN >X in 

the usual sense. Notice that such categories have all finite colimits, and these 
are stable under puUback. 

There are various axiomatisations for a class of small maps, starting with 
that of Joyal and Moerdijk J^. In this paper, we follow the formulation of 
Awodey et al. 0. A comparison between the two will appear in Remark 13.51 
below. A class S of arrows in C is called a class of small maps if it satisfies the 
following axioms: 



(51) S is closed under composition and identities; 

(52) if in a puUback square 
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/ G <S, then g G S; 

(53) for every object C in C, the diagonal Ac: C >Cx C is in S; 

(54) given an epi e: C >D and a commutative triangle 



C >D 




if / is in <S, then so is g; 

(S5) if /: C >A and g: D >A are in S, then so is their copairing 

[f,g]:C + D^A. 

Wc say that an arrow in S is small. Wc call X a small object if the unique map 

X s-1 is small. A small subobject R of an object A is a subobject R) >A 

in which R is small. A small relation between objects A and B is a subobject 

R) >Ay.B such that its composite with the projection on A is small (notice 

that this docs not mean that i? is a small subobject of Ay.B). 

On a class of small maps, we also require representability of small relations 
by means of a powerclass object: 



(PI) for any object C in C there is an object VgiC) and a natural correspon- 
dence between maps / >Vs{C) and small relations between I and C. 



In particular, the identity on Ps{C) determines a small relation €cQ Vs{C)xC. 
We think of Vs{C) as the object of all small subobjects of C; the relation So then 
becomes the membership relation between elements of C and small subobjects 
of C. The association C ^ VsiC) defines a covariant functor (in fact, a monad) 
on C. We further require the two following axioms: 



(I) The natural number object N is small; 

(R) There exists a universal small m,ap n: E >U in C, such that any other 

small map /: A >B fits in a diagram 




where both squares are pullbacks and q is epi. 



It can now be proved that a class iS satisfying these axioms induces a class of 
small maps on each slice C/C. Moreover, the reindexing functor along a small 

map f:C >D has a right adjoint 11/: C/C >C/D. In particular, it follows 

that all small maps are exponentiable in C. 
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Remark 3.5 The axioms that we have chosen for our class of smaU maps sub- 
sume ah of the Joyal-Moerdijk axioms in |10l pp. 6-8], except for the collection 
axiom (A7). In particular, the Descent Axiom (A3) can be seen to follow from 
axioms (SI) - (S5) and (P). 

Conversely, the axioms of Joyal and Moerdijk imply all of our axioms except 
for (S3) and (I). Our results in Section 21 will imply that, by adding these 
axioms, a model of the weak set theory CZFq can be obtained in the setting of 

nni. 

3.3 Final coalgebras in categories with small maps 

From now on, we shall consider on C a class of small maps S. Using their 
properties, we are now going to prove the existence of the M-type for every 
small map /: D >C, as well as the existence of a final "P^-coalgebra. 

Let us recall from ^7] that an exponentiable map /: D >C in a cartesian 

category C induces on it a polynomial endofunctor Pj , defined by 

P/(X) = ^X^=. 

Its final coalgebra, when it exists, is called the M-type associated to /. In fact, 
the functor Pj is the component over 1 of an indexed polynomial endofunctor, 
still denoted by P/, which can be presented as the composite Pf — EcII/D* of 
three indexed functors. By this presentation, it follows at once that Pf preserves 
puUbacks. The indexed M-type of / is by definition the indexed final coalgebra 
oiPf- 

In the proof of the following theorem, we will make heavy use of the internal 
language of C There, we see / as a signature, consisting of one term constructor 
for any c S C of arity Dc, the fibre of / over c. A P/-coalgebra consists of an 

object X together with a map 7: A >Pf{X), which takes x G A to a pair 

(c, t), where c G C and t goes from Dc to X. The final P/-coalgebra will then 
represent the object of all trees (both well-founded and non-well-founded) over 
the signature defined by /. 

Theorem 3.6 If f:D >C is a small map in C, then f has an (indexed) M- 

type. 

Proof. In order to obtain an (indexed) final P/-coalgebra, we want to apply 
Theorem l3.1l and for this, what remains to be checked is that Pf is small-based. 
To this end, we first need to find an exponentiable coalgebra {E,e), and then 
to verify condition Q. 

The universal small map tt: E }-U in C is exponentiable, as we noticed after 

the presentation of axiom (R). Hence, unwinding the construction preceding 
Lemma l2.13l we obtain an exponentiable object in Pj— Coalg. Using the internal 
language of C, we can describe {E,e) as follows. 

The object U on which E lives is described as 

U^{iueUA:Eu >P/(Pu))}, 
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where is the fibre of tt over u , and E is now defined as 

E^{{ueU,t:Eu >Pf{E^),eeEu)}. 

The coalgebra structure e: E ^Pf^ takes a triple e) (with te = (c, r)) 

to the pair {c,s:Dc >E), where the map s takes an element d £ Dc to the 

triple (m, t, r{d)). 

Given a coalgebra {A, a), the canonical cocone from {E,e) to it takes the fol- 
lowing form. The internal category is given by 

K^o^^"^ = {{ueU,t:E^^PfiE^),m:E^~^A)\Pf{m)t = am}; 

kI^'"^ ^ {{u,t,m,u\t',m\cj):Eu ^ Eu') \ {u,t,m), {u' ,t' ,m') e K^g^'°'\ 
t'cf) = Pf{4))t and — m}. 

(Notice that, in writing the formulas above, we have used the functor Pf in the 
internal language of C; we can safely do that because the functor is indexed. We 
shall implicitly follow the same reasoning in the proof of Theorem l4.4l below. in 
order to build an (indexed) final T's-coalgebra.) 

The diagram L^'^'"^ is specified by a coalgebra over Kq'^'°'\ but for our purposes 
we only need to consider its carrier, which is 

Condition says that the colimit of this internal diagram in C is A, but this is 
implied by the conjunction of the two following statements, which we are now 
going to prove: 

1. For all a G A there exists (it, i, m,e) £ U L^^'°''^ such that me = a; 

2. If (mo, toi "iQ: Co) and (mi, fi, mi, ei) are elements of i/L^"^'"' such that 
moeo = mici, then there exist {u,t,m,e) G C/L^'^'"^ and coalgebra mor- 
phisms (pi: E^ ^E^^ {i — 0, 1) such that mi4>i = m and <j)ie — e^. 

Condition I2J) is trivial: given (uq, ^o, "Iq, eo) and (ui, ti, mi, ei). Lemma 13.21 
allows us to fill a square 

(P,7) >{EuoM) 

mo 

{E^^,h)^^{A,a), 

in such a way that the underlying square in C is a puUback (hence, P is a small 
object). Therefore, (P, 7) is isomorphic to a coalgebra {Eu,t), and, under this 
isomorphism, the span 

{Euo , to) < (P, 7) > {En, , tl) 

takes the form 

(Euo, to) — {Eu,t) — — > (i?t,j,ti). 
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Moreover, since TOpeo — mici, there is an e G i?M such that (piC — Ci. Then, 
defining m as any of the two composites mi(l)i, the element (u, t, m, e) in U L^^'"") 
satisfies the desired conditions. 

As for condition^, fix an element a e A. We build a subobject (a) of A 
inductively, as follows: 

(a)o = {a}; 
{a)n+i — [J t{Dc) where aa' = {c,t:Dc >A). 

a'6{a)n 

Then, each (a)„ is a small object, because it is a small-indexed union of small 
objects. For the same reason (since, by axiom (I), N is a small object) their 
union (a) = UnGN(^)" small, and it is a subobject of A. It is not hard to see 
that the coalgebra structure a induces a coalgebra a' on (a) (in fact, (a) is the 
smallest subcoalgebra of {A, a) containing a, i.e. the subcoalgebra generated by 

o), and, up to isomorphism, this is a coalgebra t: Eu >PfEu, with embedding 

m: Eu >A. Via the isomorphism E^ = (a), the element a becomes an element 

e & Eu such that me — a. Hence, we get the desired 4-tuple (u, t, m, e) in 

This concludes the proof of the theorem. □ 



Theorem 3.7 The powerclass functor Vs has an (indexed) final coalgebra. 

Proof. It is easy to check that Vs is the component on 1 of an indexed functor, 
and that it maps puUbacks to weak puUbacks. 

Therefore, once again, we just need to verify that Vs is small-based. We proceed 
exactly like in the proof of Theorem l8.6l above. except for the construction of the 
coalgebra ((a), a') generated by an element a G A in^. Given a T'g-coalgebra 
{A, a), we construct the subcoalgebra of {A, a) generated by a as follows. First, 
we define inductively the subobjects 

(a}o = {a}; 
(a}„+i = y a{a'). 

<i'S(a)„ 

Each {a)n is a small object, and so is their union (a) = IJjieN^'^)"- ^^'^ coalge- 
bra structure a' is again induced by restriction of a on (a). □ 



4 The final Pg-coalgebra as a model of AFA 

Our standing assumption in this section is that C is a Heyting pretopos with 
an (indexed) natural number object and a class S of small maps. In the last 
section, we proved that in this case the T'g-functor has a final coalgebra in C. 
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Now, we will explain how this final coalgebra can be used to model various set 
theories with the Anti-Foundation Axiom. First we work out the case for the 
weak constructive theory CZFq, and then we indicate how the same method can 
be applied to obtain models for stronger, better known or classical set theories. 

Our presentation of CZFq follows that of Aczel and Rathjen in 3 ; the same 
theory appears under the name of BCST* in the work of Awodey and Warren 
in jBj. It is a first-order theory whose underlying logic is intuitionistic; its non- 
logical symbols are a binary relation symbol e and a constant lj, to be thought 
of as membership and the set of (von Neumann) natural numbers, respectively. 
Two more symbols will be added for sake of readability, as we proceed to state 
the axioms. In order to mark the distinction between the membership relation 
of the set theory and that induced by the powerclass functor inside the category, 
we shall denote the former by e and the latter by the already seen e. 

The axioms for CZFq are (the universal closures) of the following statements: 

(Extensionality) yx{x£a^xeb) a — b 
(Pairing) 3t {zet ^ ( z = x \/ z = y)) 
(Union) 3t {zet ^ 3y {zey A yex)) 
(Emptyset) 3x (zex <^ _L) 
(Intersection) 3t {zet ^ {zea A zeb)) 
(Replacement) \/xea3ly (f) ^ 3z (yez ^ 3xea (j>) 

Two more axioms will be added, but before we do so, we want to point out that 
all instances of Ao-separation follow from these axioms, i.e. we can deduce all 
instances of 

(Ao-Separation) 3t{xet ^ {xea A (p)) 

where is a formula in which t does not occur and all quantifiers are bounded. 
Furthermore, in view of the above axioms, we can introduce a new constant 
to denote the empty set, and a function symbol s which maps a set x to its 
"successor" x U {x}. This allows us to formulate concisely our last axioms: 

(Infinity-1) $euj A\/xeuj (sxeuj) 

(Infinity-2) -0(0) A \/xeu! (jp{x) il^{sx)) Wxeoj ^l){x). 

It is an old observation by Rieger TB" that models for set theory can be 
obtained as fixpoints for the powerclass functor. The same is true in the context 
of algebraic set theory (see [7] for a similar result). 

Theorem 4.1 Every Vg-fixpoint in C provides a model o/CZFq. 

Proof. Suppose we have a fixpoint E:V ^VsV, with inverse /. We call y 

the name of a small subobject A C_ V , when E{y) is its corresponding element 
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in VsiV). We interpret the predicate xey as an abbreviation of the sentence 
X € E{y) in the internal language of C. Then, the validation of the axioms for 
CZFo goes as follows. 

Extensionality holds because two small subobjects E{x) and E(y) of V are equal 
if and only if, in the internal language of C, 2; G E{x) ^ z G E{y). The pairing of 

two elements x and y represented by two arrows 1 >V, is given by where 

I is the name of the (small) image of their copairing [x, y] : 1 + 1 >V. The union 

of the sets contained in a set x is interpreted by applying the multiplication of 
the monad Vs to {VsE){E{x)). The intersection of two elements x and y \nV 
is given by I{E{x) n E{y)), where the intersection is taken in Vs{V). The least 
subobject C y is small, and its name 0: 1 >V models the empty set. 

For the Replacement axiom, consider a, and suppose that for every xea there 
exists a unique y such that (f>. Then, the subobject {y \ 3x ea (j)} V is covered 
by E(a), hence small. Applying / to its name, we get the image of (f>. 

Finally, the Infinity axioms follow from the axiom (I). The morphism 0: 1 >V, 

together with the map s: V yV which takes an element x to x \J {x}, yields 

a morphism a:N >V. Since N is small, so is the image of a, as a subobject 

of y, and applying / to its name we get an in y which validates the axioms 
Infinity- 1 and Infinity- 2. □ 

The theorem shows how every "Pj-fixpoint models a very basic set theory. 
Now, imposing extra properties on a fixpoint, we can deduce the validity of 
further axioms. For example, in it is shown how the initial T'g-algebra 
(which is a fixpoint, afterall!) models the Foundation Axiom. Here, we show 
how the final "Pg-coalgebra satisfies the Anti-Foundation Axiom. To formulate 
this axiom, we define the following notions. A (directed) graph consists of a 
pair of sets (n, e) such that n C e x e. A colouring of such a graph is a function 
c assigning to every node xen a set c{x) such that 

c{x) = {c{y) I {x,y)€e}. 

This can be formulated solely in terms of e using the standard encoding of pairs 
and functions. In ordinary set theory (with classical logic and the Foundation 
Axiom) , the only graphs that have a colouring are well-founded trees and these 
colourings are then necessarily unique. 

The Anti-Foundation Axiom says: 
(AFA) Every graph has a unique colouring. 

Proposition 4.2 IfC has an (indexed) final Vg-coalgehra, then this is a model 
for the theory CZFo+AFA. 

Proof. We clearly have to check just AFA, since any final coalgebra is a 
fixpoint. To this end, note first of all that, because (V, E) is an indexed final 
coalgebra, we can think of it as a final T's-coalgebra in the internal logic of C. 

So, suppose we have a graph (n, e) in V . Then, n (internally) has the structure 
of a "Pg-coalgebra u:n ^Vgn, by sending a node x e n to the (small) set of 
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nodes yen such that {x,y)ee. The colouring of n is now given by the unique 



By Theorem 71 it then foUows at once: 

Corollary 4.3 Every Heyting pretopos with a natural number object and class 
of small maps contains a model of CZFq+AFA. 

This result can be extended to theories stronger than CZFq. For example, to 
the set theory CST introduced by Myhill in J^. This theory is closely related 
to (in fact, intertranslatable with) CZFo+Exp, where Exp is (the universal 
losure of) the following axiom. 

(Exponentiation) 3t(fet ^ Fun(/, x, j/)) 

Here, the predicate Fun(/, x, y) expresses the fact that / is a fimction from 
X to y, and it can be formally written as the conjunction of Vaex 3\bey (a, b)ef 
and \fzef3aex,bey (z = (a, 6)). 

Theorem 4.4 Assume the class S of small maps also satisfies 
(E) The functor Hf preserves small maps for any f in S. 
Then, C contains a model o/CST+AFA. 

Proof. We already saw how the final Ps-coalgebra {V, E) models CZFq+AFA. 
Now, (E) implies that A^ is small, if A and B are, so, in E{y)^^^^ is always 
small. This gives rise to a small subobject of V , by considering the image of the 
morphism that sends a function / S E{y)^^^^ to the element in V representing 
its graph. The image under / of the name of this small object is the desired 
exponential t. □ 

Another example of a stronger theory which can be obtained by imposing 
further axioms for small maps is provided by IZF~ , which is intuitionistic ZF 
without the Foundation Axiom. It is obtained by adding to CZFq the following 
axioms: 

(Powerset) Ely Vz (zey ^ Vwez (wea;)) 
(Full Separation) ByV z {zey <^ zex /\ (/)) 
(Collection) Vyea; 3 w (/) — > 3z Vyea; 3 wez 

(In Full Separation, y is not allowed to occur in 0.) 

In the following theorem, we call a commutative square 




□ 



A 



^ B 



f 



C 



a 



^ D 
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a quasi-puUback if the mediating arrow from A to the puUback of / and g is 
epic. By now, the proof of the statement should be routine (if not, the reader 
should consult [7j): 

Theorem 4.5 Assume the class of small maps S also satisfies 

(P2) ifX >B belongs to S, then so does Vs^X ^B); 

(M) every monomorphism is small; 

(C) for any two arrows p: Y >X and f: X >A where p is epi and f belongs 

to S, there exists a quasi-pullback square of the form 

Z >Y^-^X 

9 f 
B ■ >A 

h 

where h is epi and g belongs to S. 
Then, C contains a model o/IZF^+AFA. 

Corollary 4.6 // the pretopos C is Boolean, then classical logic is also true 
in the model, which will therefore validate ZF^+AFA, Zermelo-Fraenkel set 
theory with Anti- Foundation instead of Foundation. 

Finally, we can build a model for a non-well-founded version of Aczel's set 
theory CZF in the setting of [n|. 

The set theory CZF^+AFA, studied by M. Rathjen in [T3|[T1], is obtained 
by adding to CZFq the axiom AFA, as well as the following: 

(Strong Collection) Vxea 3y y) 3b B{x£a,yeb) (p{x, y) 

(Subset Collection) 3cy z{\/ xea3y eb(f)(x,y, z) -^3decQ{xea,yed)(j){x,y,z) 

Here, B{xea,yeb) 4> abbreviates: 

\/xea3yeb<pA\/yeb3xea(l). 

In order for a class of small maps to give a model Subset Collection, the 
class has to satisfy a rather involved axiom that will be called (F). In order to 

formulate it, we need to introduce some notation. For two morphisms A yX 

and B >X, Mx{A, B) will denote the poset of multi- valued functions from A 

to B over X, i.e. jointly monic spans in C/X, 

A« P >B 

with P )-X small and the map to A epic. By puUkback, any f:Y )-X 

determines an order preserving function 

f*:Mx{A,B)^MY{f*AJ*B). 
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Theorem 4.7 Assume the class S of small maps also satisfies (C) as in The- 
orem \J~^ and the following axiom: 

(F) for any two small maps A >X andB >X, there are an epi p: X' >X, 

a small map f:C )-X' and an element P G Mc{f*p* A, f*p* B), such 

that for any g: D >X' and Q G Mo{g*p*A, g*p* B), there are morphisms 

x: E >D and y: E >C, with x epi, such that x*Q > y*P. 

Then, C contains a model o/CZF^+AFA. 

Proof. Any fixpoint for Vs will model Strong Collection in virtue of property 
(C) of the class of small maps. 

Because of (F), the fixpoint will also model the Fullness axiom of |3] (where it is 
proved to be equivalent to Subset Collection over CZFq and Strong Collection). 

□ 

Up to this point, we have only given recipes for constructing models of 
various non-well-founded set theories. The critical reader might argue that we 
have not yet exhibited one such model, since we have not shown any category 
to satisfy the given axioms. 

To conclude the paper, we present several examples of categories that satisfy 
our axioms. Of course, this is not the place to study them in detail, but we would 
like to give at least a sketchy presentation. For a more complete treatment, the 
reader is advised to look at ^Hl- A thorough study of the properties of these 
models is the subject for future research. 

The most obvious example is clearly the category of classes, where the notion 
of smallness is precisely that of a class function having as fibres just sets. This 
satisfies all the presented axioms. Along the same lines, one can consider the 
category of sets, where the class of small maps consists of those functions whose 
fibres have cardinality at most k, for a fixed infinite regular cardinal k. This 
satisfies axioms (Sl-5), (PI), (I), (R), (M) and (C), but not (E). However, 
if K is also inaccessible, then (E) is satisfied, as well as (P2) and (F). 

Consider the topos Sh(C) of sheaves over a site C, with puUbacks and a 
subcanonical topology. Then, for an infinite regular cardinal k greater than the 
number of arrows in C, define the notion of smallness (relative to n) following jlOl 
Chapter IV. 3]. This satisfies the axioms (Sl-5), (PI), (I) and (R). Moreover, 
if K is inaccessible, it satisfies also (P2), (M), (C). 

Finally, on the effective topos £ff 8 one can define a class of small maps 
in at least two different ways. For the first, consider the global section functor 

F: £ff >Set^ and fix a regular cardinal k. Then, say that a map /: X >Y is 

small if it fits in a quasi-puUback 

P »• A 

9 f 

Q »y 
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where P and Q are projectives and T{g) is K-small in Set. With this definition, 

the class of small maps satisfies all the basic axioms (Sl-5), (PI), (I) and (R), 
as well as (C) and (M). If n is inaccessible, it also satisfies (P2). 

Alternatively, we can define a map to be small if internally its fibres are 
quotients of a subobject of the natural number object of £ff. This notion of 
smallness satisfies all the axioms apart from (P2). 
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